CVE-2019-1999

Priority
Description
In binder_alloc_free_page of binder_alloc.c, there is a possible double
free due to improper locking. This could lead to local escalation of
privilege in the kernel with no additional execution privileges needed.
User interaction is not needed for exploitation. Product: Android.
Versions: Android kernel. Android ID: A-120025196.
Ubuntu-Description
It was discovered that a race condition existed in the Binder IPC driver
for the Linux kernel. A local attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code.
Notes
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):ignored (was needs-triage ESM criteria)
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Patches:
Introduced by
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed by
5cec2d2e5839f9c0fec319c523a911e0a7fd299f
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):ignored (was needs-triage ESM criteria)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):ignored (abandoned)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):ignored (end-of-life)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):ignored (end-of-life)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (5.0.0-15.16~18.04.1)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):ignored (was needs-triage ESM criteria)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [end-of-life])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [end-of-life])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [end-of-life])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):ignored (abandoned)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):ignored (was needs-triage now end-of-life)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
More Information

Updated: 2020-07-28 20:07:21 UTC (commit d26b6ca9f5b3adb89bb036ce73ae7dab894935ec)